Identity & Access Management (IAM) Engineer

Overview

DecisionPoint seeks an Identity & Access Management (IAM) Engineer to support enterprise identity operations and authentication services for a large federal and DoD-aligned mission environment. This role manages identity governance, access control enforcement, single sign-on (SSO) integrations, and multi-factor authentication (MFA) capabilities across cloud and on-premise environments. The IAM Engineer will contribute directly to the implementation of the Zero Trust identity pillar, ensuring secure, reliable, and policy-driven access to mission-critical systems.

This position is fully remote.
Duties & Responsibilities

The Identity & Access Management Engineer will:
- Manage SSO integrations across enterprise applications and services.

- Configure and maintain identity governance workflows, account lifecycle management, and access approval processes.

- Implement and manage MFA, conditional access policies, and identity verification mechanisms.

- Support development and enforcement of identity-based access controls aligned with Zero Trust principles.

- Configure IAM roles, permissions, and policies in cloud environments, including AWS IAM.

- Conduct access reviews, entitlement audits, and privileged access assessments.

- Partner with cybersecurity teams to align identity controls with DoD security and compliance requirements.

- Troubleshoot identity issues related to SSO, MFA, directory services, and authentication flows.

- Assist with identity roadmap planning, modernization activities, and capability enhancements.

- Maintain identity standards, configuration documentation, and architectural artifacts.

- Support incident response activities related to identity threats or compromised accounts.

- Contribute to the development and refinement of IAM procedures, playbooks, and governance models.

Qualifications
Clearance Requirement

Must hold an active Top Secret clearance, supported by a Tier 5 background investigation.
Education (Required)

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field.
Experience (Required)
- Minimum 6 y ears of experience in identity and access management, authentication engineering, or IAM operations.

- Experience implementing or supporting SSO integrations, MFA configurations, or identity governance processes.

- Experience managing IAM roles, policies, and permissions in cloud environments (AWS preferred).

- Experience conducting access reviews, entitlement audits, or privilege management activities.

- Experience supporting the implementation of identity-focused security controls.

Technical Knowledge (Required)
- Strong understanding of IAM concepts, including authentication, authorization, federation, and identity governance.

- Experience with SSO technologies, MFA systems, and identity providers.

- Proficiency in AWS IAM roles, policies, access keys, and permission boundaries.

- Knowledge of Zero Trust identity principles and identity-centric access control models.

- Understanding of DoD cybersecurity requirements related to identity and access management.

Technical Knowledge (Preferred)
- Experience with directory services (e.g., Active Directory, Azure AD).

- Familiarity with identity risk scoring, behavioral analytics, or conditional access signals.

- Experience integrating IAM with CI/CD pipelines or DevSecOps workflows.

Certifications

Required:
- Security+

Preferred:
- AWS IAM or AWS Security specialty certification

- Additional DoD 8570/8140 IAM-related certifications

Skills
- Strong problem-solving abilities for diagnosing authentication and access issues.

- Excellent communication skills for collaborating with cybersecurity, engineering, and application teams.

- High attention to detail for managing access controls, policies, and identity workflows.

- Ability to manage multiple IAM initiatives in a fast-paced, mission-critica